CVE-2025-11940 LibreWolf Installer setup.nsi uncontrolled search path

A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...

CVE-2025-11940: Uncontrolled Search Path Element

A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...

PT-2025-42717

Name of the Vulnerable Software and Affected Versions LibreWolf versions prior to 144.0-1 Description A security issue exists in LibreWolf on Windows, affecting the file assets/setup.nsi within the Installer component. This allows for uncontrolled search path manipulation through an unknown...

LibreWolf code issues and vulnerabilities

LibreWolf is a Firefox-based web browser open-sourced by LibreWolf. A code issue vulnerability exists in LibreWolf version 143.0.4-1 and earlier, which stems from an uncontrolled search path for an unknown function in the file assets/setup.nsi, which could lead to a local attack...

FreeBSD : librewolf -- Undefined behavior in selection node cache (b73d1f2a-96de-11ef-9e71-00d8612f03c8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b73d1f2a-96de-11ef-9e71-00d8612f03c8 advisory. [email protected] reports: When manipulating the selection node cache, an attacker may have been abl...

librewolf -- Undefined behavior in selection node cache

[email protected] reports: When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash. This vulnerability affects Firefox 131.0.3...